$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/5821c47e-e815-42de-bd6b-19a2e1ae564a/0/A816FDA8ADEC8085A8A348E698709DE583B219B5.mft File: A816FDA8ADEC8085A8A348E698709DE583B219B5.mft (raw, json) Hash identifier: CFly0bzzAnczUa3Narw6jtNMBMTzjbEm++aZtEX6MVA= Subject key identifier: D3:CA:B2:EA:16:D8:C2:D4:14:0E:E7:4E:5E:0B:58:24:19:28:89:4D Authority key identifier: A8:16:FD:A8:AD:EC:80:85:A8:A3:48:E6:98:70:9D:E5:83:B2:19:B5 Certificate issuer: /CN=A816FDA8ADEC8085A8A348E698709DE583B219B5 Certificate serial: 36B75B776B28AB6B6C15187D0687ECDA96216ADB Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/A816FDA8ADEC8085A8A348E698709DE583B219B5.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/5821c47e-e815-42de-bd6b-19a2e1ae564a/0/A816FDA8ADEC8085A8A348E698709DE583B219B5.mft Manifest number: 02EC Signing time: Mon 05 May 2025 13:24:43 +0000 Manifest this update: Mon 05 May 2025 13:19:43 +0000 Manifest next update: Tue 06 May 2025 14:27:43 +0000 Files and hashes: 1: 326130373a353463373a353030303a3a2f33362d3336203d3e20323136343535.roa (hash: qaHIJSPkxJsqQxmrUEOF/0vyCpR/vYUBJ2KiKF+IkLk=) 2: A816FDA8ADEC8085A8A348E698709DE583B219B5.crl (hash: HQWHT6OWgpLZJOE/UXapPswQ+iWnOzZKbWJCUsT9yCk=) 3: 326130373a353463373a356630303a3a2f34302d3438203d3e20323135353737.roa (hash: Ba5xfWqOndYVE5HvV9FAMJv5ExmemcLNBu1Yv2cHUgw=) 4: 326130373a353463373a353430303a3a2f33382d3338203d3e20323136343535.roa (hash: WgAgPO7m2PRtW/hhLgCh/LUbstT+o0+84QgZ+UQ8JTY=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/5821c47e-e815-42de-bd6b-19a2e1ae564a/0/A816FDA8ADEC8085A8A348E698709DE583B219B5.crl rsync://rsync.paas.rpki.ripe.net/repository/5821c47e-e815-42de-bd6b-19a2e1ae564a/0/A816FDA8ADEC8085A8A348E698709DE583B219B5.mft rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/A816FDA8ADEC8085A8A348E698709DE583B219B5.cer rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.crl rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 06 May 2025 14:07:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36:b7:5b:77:6b:28:ab:6b:6c:15:18:7d:06:87:ec:da:96:21:6a:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A816FDA8ADEC8085A8A348E698709DE583B219B5 Validity Not Before: May 5 13:19:43 2025 GMT Not After : May 6 14:27:43 2025 GMT Subject: CN=D3CAB2EA16D8C2D4140EE74E5E0B58241928894D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:66:83:92:c2:49:27:66:8e:63:a6:11:be:0d: e6:84:10:fc:72:ea:f2:c8:9b:7c:84:74:d7:30:5e: 48:b0:09:c4:94:77:eb:b9:f2:42:4d:99:e3:4c:66: 38:79:f7:d4:cb:b6:82:d0:ff:a9:c7:7a:03:0d:97: 02:f5:20:8b:64:c3:1a:10:7a:d4:02:7e:52:f9:cc: ff:3a:eb:db:cb:1b:c7:fd:d8:b1:f4:8b:e2:e8:47: dc:37:e3:42:d0:7a:9d:c2:cf:ed:a4:b0:26:a3:ae: 65:49:71:76:7e:ab:e0:33:98:81:21:f3:f5:e6:ac: d2:64:1b:37:54:e4:06:ef:35:09:9e:91:32:34:5c: 09:28:59:34:72:46:ab:b0:58:06:0d:52:07:36:72: cf:58:0d:90:8d:e6:1c:82:9a:3c:49:57:b9:33:0c: d8:04:13:ef:15:fd:33:d5:3a:86:37:60:c4:f8:8d: bb:df:a0:ae:e5:a4:74:61:06:85:f1:bb:f2:29:b2: 2b:95:a5:56:51:24:46:49:ca:a5:da:d1:9c:69:24: 3a:00:93:36:60:c4:48:82:73:00:86:72:2c:ea:05: f0:9e:6d:c0:30:a5:1b:b0:11:5d:3c:70:3d:e9:a8: 49:64:95:f5:2f:06:3c:79:7f:d8:2a:a1:15:34:d3: 4b:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:CA:B2:EA:16:D8:C2:D4:14:0E:E7:4E:5E:0B:58:24:19:28:89:4D X509v3 Authority Key Identifier: keyid:A8:16:FD:A8:AD:EC:80:85:A8:A3:48:E6:98:70:9D:E5:83:B2:19:B5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/5821c47e-e815-42de-bd6b-19a2e1ae564a/0/A816FDA8ADEC8085A8A348E698709DE583B219B5.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/A816FDA8ADEC8085A8A348E698709DE583B219B5.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/5821c47e-e815-42de-bd6b-19a2e1ae564a/0/A816FDA8ADEC8085A8A348E698709DE583B219B5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 65:6d:9d:7c:5b:32:cd:b0:12:b5:57:3d:b2:e0:3b:7a:b5:df: bb:e8:65:30:cc:ca:dd:e4:1f:73:87:89:06:0c:f6:11:9c:47: f7:38:b5:c1:5e:2f:82:d0:ec:38:d1:74:a0:9f:97:eb:99:88: 68:6c:3a:2e:11:e8:00:ed:85:19:ba:aa:58:e8:14:38:fd:e7: 0f:e9:45:1e:01:ad:c0:61:c0:85:19:aa:9c:c6:cf:84:74:51: 2a:af:b4:89:32:5d:57:7c:f7:c2:6a:f4:a0:3b:57:1f:0c:23: 81:46:b7:71:4a:f8:c4:1d:b5:b6:1f:f2:58:93:90:e3:74:dc: f6:f7:7c:ab:40:84:bf:09:8f:08:2f:88:6c:25:9a:ad:73:a2: fa:2d:b3:ef:fe:57:cb:73:d4:6d:9e:52:cd:fd:cf:ff:c6:c2: 91:8c:19:a6:56:00:02:4d:9e:8c:f4:14:72:c0:6a:f1:24:fb: f0:38:88:29:69:a2:e6:bf:7f:c0:dc:0d:1e:c4:8c:bf:6d:bb: e0:06:17:8e:16:3f:ae:8e:aa:de:6a:15:3c:f3:0d:69:71:f1: fc:ee:0f:ea:fe:72:cf:a2:22:01:88:2b:42:2b:ff:8c:be:4e: 52:dc:2e:1c:49:a9:bb:91:2e:0d:96:a6:45:8c:87:e5:50:73: 9a:5e:44:5e -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUNrdbd2soq2tsFRh9Bofs2pYhatswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTgxNkZEQThBREVDODA4NUE4QTM0OEU2OTg3MDlERTU4 M0IyMTlCNTAeFw0yNTA1MDUxMzE5NDNaFw0yNTA1MDYxNDI3NDNaMDMxMTAvBgNV BAMTKEQzQ0FCMkVBMTZEOEMyRDQxNDBFRTc0RTVFMEI1ODI0MTkyODg5NEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDpZoOSwkknZo5jphG+DeaEEPxy 6vLIm3yEdNcwXkiwCcSUd+u58kJNmeNMZjh599TLtoLQ/6nHegMNlwL1IItkwxoQ etQCflL5zP8669vLG8f92LH0i+LoR9w340LQep3Cz+2ksCajrmVJcXZ+q+AzmIEh 8/XmrNJkGzdU5AbvNQmekTI0XAkoWTRyRquwWAYNUgc2cs9YDZCN5hyCmjxJV7kz DNgEE+8V/TPVOoY3YMT4jbvfoK7lpHRhBoXxu/IpsiuVpVZRJEZJyqXa0ZxpJDoA kzZgxEiCcwCGcizqBfCebcAwpRuwEV08cD3pqElklfUvBjx5f9gqoRU000vBAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQU08qy6hbYwtQUDudOXgtYJBkoiU0wHwYDVR0j BBgwFoAUqBb9qK3sgIWoo0jmmHCd5YOyGbUwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNTgyMWM0N2UtZTgxNS00MmRlLWJkNmItMTlhMmUxYWU1 NjRhLzAvQTgxNkZEQThBREVDODA4NUE4QTM0OEU2OTg3MDlERTU4M0IyMTlCNS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9hYTAwNGJhMS00MTliLTRk YjUtYmJkMy01Y2NhNjMzY2FlM2YvMC9BODE2RkRBOEFERUM4MDg1QThBMzQ4RTY5 ODcwOURFNTgzQjIxOUI1LmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzU4MjFjNDdlLWU4MTUtNDJkZS1iZDZiLTE5YTJlMWFlNTY0YS8wL0E4MTZGREE4 QURFQzgwODVBOEEzNDhFNjk4NzA5REU1ODNCMjE5QjUubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBlbZ18 WzLNsBK1Vz2y4Dt6td+76GUwzMrd5B9zh4kGDPYRnEf3OLXBXi+C0Ow40XSgn5fr mYhobDouEegA7YUZuqpY6BQ4/ecP6UUeAa3AYcCFGaqcxs+EdFEqr7SJMl1XfPfC avSgO1cfDCOBRrdxSvjEHbW2H/JYk5DjdNz293yrQIS/CY8IL4hsJZqtc6L6LbPv /lfLc9RtnlLN/c//xsKRjBmmVgACTZ6M9BRywGrxJPvwOIgpaaLmv3/A3A0exIy/ bbvgBheOFj+ujqreahU88w1pcfH87g/q/nLPoiIBiCtCK/+Mvk5S3C4cSam7kS4N lqZFjIflUHOaXkRe -----END CERTIFICATE-----Generated at Tue May 6 01:49:38 2025 by rpki-client